From edf6b0fce509133dccfeda71227240e60606f100 Mon Sep 17 00:00:00 2001
From: Steve Bennett <steveb@workware.net.au>
Date: Fri, 12 May 2017 12:14:00 +1000
Subject: regexp: Fix bad memory access on missing close brace
For counted repetitions
Reported-by: Ryan Whitworth <me@ryanwhitworth.com>
Signed-off-by: Steve Bennett <steveb@workware.net.au>
---
jimregexp.c | 4 ++++
1 file changed, 4 insertions(+)
(limited to 'jimregexp.c')
diff --git a/jimregexp.c b/jimregexp.c
index b256e76..cf31558 100644
--- a/jimregexp.c
+++ b/jimregexp.c
@@ -477,6 +477,10 @@ static int regpiece(regex_t *preg, int *flagp)
if (*end == '}') {
max = min;
}
+ else if (*end == '\0') {
+ preg->err = REG_ERR_UNMATCHED_BRACES;
+ return 0;
+ }
else {
preg->regparse = end;
max = strtoul(preg->regparse + 1, &end, 10);
--
cgit v1.1